CVE-2022-50440

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate the box size for the snooped cursor Invalid userspace dma surface copies could potentially overflow the memcpy from the surface to the snooped image leading to crashes. To fix it the dimensions of the copybox have to be validated against the expected size of the snooped cursor.

CVSS 3.1

5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.2% chance of exploitation in the next 30 days; higher than 6% of CVEs (scores of 2026-10-25)

CWE

CWE-476

Published

2025-10-01

Modified

2026-10-15

Record from

the NVD, synced 2026-10-19

Affected

• linux:linux_kernel

References

• https://git.kernel.org/stable/c/439cbbc1519547f9a7b483f0de33b556ebfec901
• https://git.kernel.org/stable/c/4cf949c7fafe21e085a4ee386bb2dade9067316e
• https://git.kernel.org/stable/c/4d54d11b49860686331c58a00f733b16a93edfc4
• https://git.kernel.org/stable/c/50d177f90b63ea4138560e500d92be5e4c928186
• https://git.kernel.org/stable/c/622d527decaac0eb65512acada935a0fdc1d0202

Check your stackJSON